Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          Gl2DHkNDQklEHNKY4DeJOV3D7z1z7lKnfMKiL9wSTQA=
Subject key identifier:   D3:B3:48:65:D8:9D:D9:B5:65:B6:72:2A:81:00:CA:78:55:78:65:32
Certificate issuer:       /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial:       6F9E0C05EE1631D587636384AFD46C1AA585CC22
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 14 Feb 2023 14:24:04 +0000
ROA not before:           Tue 14 Feb 2023 14:19:04 +0000
ROA not after:            Tue 13 Feb 2024 14:24:04 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9e:0c:05:ee:16:31:d5:87:63:63:84:af:d4:6c:1a:a5:85:cc:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Validity
            Not Before: Feb 14 14:19:04 2023 GMT
            Not After : Feb 13 14:24:04 2024 GMT
        Subject: CN=D3B34865D89DD9B565B6722A8100CA7855786532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:79:84:fe:1c:b3:58:a1:f2:bf:c5:a6:1c:89:
                    3e:28:43:31:ea:26:fc:27:15:22:8e:f8:b9:ff:09:
                    91:3f:0b:9b:47:58:e1:a0:ff:5f:0d:88:22:05:74:
                    86:94:ab:e5:d1:44:11:42:e7:57:f6:e6:57:90:3f:
                    68:d9:2d:5c:7d:6e:13:d5:b6:a5:00:fe:81:ca:41:
                    93:2a:d6:df:4b:e9:8d:ac:1e:80:bf:39:df:9c:4f:
                    89:35:ca:1e:65:af:26:cc:45:de:01:20:a2:ef:72:
                    aa:c4:6b:98:3c:56:b3:c6:5d:49:41:ae:fd:14:19:
                    c2:83:e3:2d:2b:a9:cc:51:d8:24:b5:f3:74:74:4c:
                    8c:e5:6b:cc:86:d4:ba:44:cc:af:0c:5a:b8:dc:4d:
                    fc:61:4b:f8:22:b7:7a:66:2f:81:d8:73:8f:f0:93:
                    40:1e:b0:f9:29:7f:6a:4a:b3:77:10:06:84:9b:6e:
                    6e:de:94:94:2d:b5:fc:6e:8a:93:b2:94:97:b8:06:
                    15:04:b8:e6:fa:22:91:4d:93:2d:3f:e4:11:76:37:
                    91:87:8f:11:29:e1:04:45:bc:91:00:2c:ed:71:d6:
                    a2:64:7b:6b:4c:28:dd:b3:9b:9d:5e:ad:1a:46:ec:
                    be:c2:9c:b8:ca:55:0b:1d:28:a9:83:24:fd:30:69:
                    f6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B3:48:65:D8:9D:D9:B5:65:B6:72:2A:81:00:CA:78:55:78:65:32
            X509v3 Authority Key Identifier:
                keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:d5:af:93:15:32:64:50:80:f7:2b:18:03:16:95:a0:77:68:
         6d:2e:06:99:1a:0c:54:05:be:b0:b7:01:a4:56:c7:37:b4:6a:
         8c:53:d8:8a:94:2f:10:3c:3d:55:77:47:6e:d8:3c:12:e6:b5:
         d7:76:8e:13:68:34:09:91:c6:a3:22:f1:77:fb:5c:32:02:7c:
         73:2d:0c:e3:73:62:19:ca:f9:aa:1d:65:9d:b9:14:fe:05:3a:
         e2:98:f0:04:1d:44:0c:e7:c1:3f:55:34:b0:db:4c:23:a6:46:
         dc:80:19:d0:af:db:32:6c:16:bb:25:b8:ca:19:6f:d3:68:fd:
         ed:e4:24:63:43:d6:8a:30:cd:ec:f2:0f:cd:d7:ea:ee:0e:14:
         7b:d6:49:5e:71:f8:93:6b:20:69:f9:ca:23:44:d3:40:25:7c:
         ff:f7:9f:88:52:c3:2d:48:c3:b5:75:7c:6d:cb:e6:72:78:f7:
         fd:f7:2e:7c:eb:6f:93:16:19:c3:c7:6d:d9:9f:bb:ed:a5:98:
         16:45:9e:01:a7:f6:a9:c2:10:76:28:d3:f8:28:d8:c9:e7:00:
         65:af:93:05:08:23:27:dc:48:1f:40:2a:6e:78:2f:af:f4:ed:
         24:8b:43:94:bd:42:d2:66:29:33:60:f1:a6:48:76:95:71:50:
         53:a4:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:37:05 2025 by rpki-client